Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/0WRtpsZ8Ler1RxZ-_cnN4jQ7XI4.roa
File:                     0WRtpsZ8Ler1RxZ-_cnN4jQ7XI4.roa (raw, json)
Hash identifier:          3s1NUqWpvJ0QwNVPBjJMFOdEmrskdVwjaO5XYKl5AHE=
Subject key identifier:   D1:64:6D:A6:C6:7C:2D:EA:F5:47:16:7E:FD:C9:CD:E2:34:3B:5C:8E
Certificate issuer:       /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial:       1123D850
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/0WRtpsZ8Ler1RxZ-_cnN4jQ7XI4.roa
Signing time:             Sat 01 Jan 2022 01:56:19 +0000
ROA not before:           Sat 01 Jan 2022 01:56:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44185
IP address blocks:        92.60.48.0/22 maxlen: 24
                          185.91.200.0/22 maxlen: 24
                          2a01:b200::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287561808 (0x1123d850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
        Validity
            Not Before: Jan  1 01:56:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d1646da6c67c2deaf547167efdc9cde2343b5c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:3a:6b:06:f3:76:74:92:d1:cd:2e:26:1b:
                    3d:45:a8:9c:d9:ca:dd:25:00:42:c7:98:0b:5d:aa:
                    c3:6f:17:7a:19:da:f5:99:a3:8c:75:27:1a:5d:3d:
                    3d:e4:2a:3e:d0:78:84:a4:00:53:49:be:b3:e7:94:
                    41:db:58:8c:21:ae:57:b0:1e:7f:50:29:c8:d5:53:
                    22:6c:c9:89:33:b9:8e:ae:8f:76:fd:8f:86:6b:8c:
                    66:ac:6a:8b:66:7b:a0:d4:a6:1c:dc:10:11:2c:62:
                    49:09:25:91:43:5d:43:16:ef:86:11:16:5f:12:48:
                    a3:a1:60:c0:1a:a5:fe:31:a1:e6:e9:f1:be:fd:44:
                    e1:fe:1c:3b:ee:57:cb:d6:0e:3e:2f:eb:34:9a:ad:
                    6f:18:72:3c:a3:22:b5:e4:f5:fc:50:6d:91:90:cf:
                    c9:eb:29:b8:03:6d:a0:60:f5:9a:92:72:f9:44:93:
                    6d:d3:af:29:07:a0:66:22:3d:77:71:87:e2:9d:f0:
                    20:02:82:b6:b3:26:67:1d:92:0c:c8:fc:4b:98:22:
                    58:4d:7c:fc:a5:cc:b1:fd:d4:71:57:83:60:d4:0a:
                    6c:30:96:8d:16:bc:4e:02:04:1e:00:16:4a:33:c8:
                    9f:d5:d8:67:25:69:ae:91:b9:a0:f5:f9:05:33:e9:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:64:6D:A6:C6:7C:2D:EA:F5:47:16:7E:FD:C9:CD:E2:34:3B:5C:8E
            X509v3 Authority Key Identifier:
                keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/0WRtpsZ8Ler1RxZ-_cnN4jQ7XI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.60.48.0/22
                  185.91.200.0/22
                IPv6:
                  2a01:b200::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:2e:42:a3:2e:8a:63:be:05:23:8f:96:30:b1:0f:0c:10:77:
         53:43:5f:37:81:d6:23:2c:a7:dd:3c:b2:1b:7a:ad:b2:36:77:
         0b:95:68:52:e4:ec:1f:69:81:51:41:06:55:72:cf:0a:e3:59:
         b9:8e:1f:f5:34:b0:9c:4d:a1:4f:63:35:b7:23:75:46:e7:80:
         25:84:30:fa:99:44:6e:18:4b:98:7d:e5:43:a3:7f:ab:46:3f:
         26:4d:a1:64:06:42:54:17:53:4c:d6:9b:4a:32:99:82:d7:10:
         53:48:63:50:c7:ea:41:af:71:20:bb:0f:b8:e7:22:e4:fb:5e:
         75:47:76:1d:52:1f:11:53:88:77:b9:71:23:25:3d:e2:d7:8c:
         cd:44:d9:a4:57:87:4e:f8:4b:64:1a:63:db:d4:78:ea:5a:12:
         b1:c1:c3:19:74:d8:68:28:04:89:30:d0:5b:5e:d1:7a:49:0f:
         90:8b:b8:ae:f6:e6:3e:fb:00:54:0f:60:da:dd:f6:95:75:7e:
         9a:85:e1:52:7e:e4:a0:05:81:a4:b6:d5:fc:67:fa:3d:07:2a:
         a9:54:b0:79:68:20:32:ae:a4:73:00:8a:29:6e:8d:14:1d:0c:
         af:4d:cb:b9:2d:b1:6b:31:9f:e7:bf:3a:cf:46:81:09:44:d2:
         8d:09:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:12 2024 by rpki-client on console-ams.rpki-client.org